Add security rules in firebase auth and client side